3b6a09afc3ec83c50a531dc5176b4d3e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b6a09afc3ec83c50a531dc5176b4d3e_JaffaCakes118
Size

350KB
MD5

3b6a09afc3ec83c50a531dc5176b4d3e
SHA1

62342a3ace8aa093aabe68c7704578d45b0482fa
SHA256

d4327512a3f61067fb48225148868f742c1070e0d81cb6cdbce7da3cdc71ded0
SHA512

359243eda0afddf362dde3a27b607fd35c57da3d808fa2ae44c3c964ae5b227fee155dca03e6ceca03ab0d55c6f4aa7eb468b95449a4766b8d22f5542506554f
SSDEEP

6144:qnUhwd+37fV8r8IF6Nhc23rLD1cAA25JtURpwi03gI/qBisAqs:qCKE02bLD1cl25JtUu/qBiNv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b6a09afc3ec83c50a531dc5176b4d3e_JaffaCakes118

Files

3b6a09afc3ec83c50a531dc5176b4d3e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c5741feb31a37ebbbb330d4a77456dc4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

system60

MethCallEngine
ord516
ord595
ord598
ord525
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord606
ord608
ord717
ProcCallEngine
ord644
ord645
ord570
ord573
ord681
ord100
ord616
ord617
ord650

Sections

.text
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ